Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/80DB21D6A87411F18EA41AF1CE1D38B0.roa
File:                     80DB21D6A87411F18EA41AF1CE1D38B0.roa (raw, json)
Hash identifier:          OMxvbvxEMBZmoLJq4ipJyp1dZ6IwZtE6z+/zMaJZI6A=
Subject key identifier:   6A:87:DB:45:A8:23:60:B4:EF:6B:BB:24:69:87:D8:9C:AB:93:3C:1F
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       020A
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/80DB21D6A87411F18EA41AF1CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:22:56 +0000
ROA not before:           Fri 04 Sep 2026 15:22:52 +0000
ROA not after:            Thu 04 Sep 2036 15:22:52 +0000
asID:                     328939
IP address blocks:        102.206.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:22:52 2026 GMT
            Not After : Sep  4 15:22:52 2036 GMT
        Subject: CN=6a9ae250-c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:4a:75:b8:4a:0d:61:35:26:9c:42:64:63:
                    8a:7c:cf:5c:3e:9f:c5:a4:b8:2e:5b:9c:01:51:4c:
                    9e:3b:2d:cf:98:20:1a:97:e5:9d:a0:a4:76:f2:cd:
                    b4:c6:91:18:46:79:3a:51:ae:4f:c7:b8:48:cd:22:
                    2d:ee:5d:25:81:db:15:9c:c8:a0:5b:b7:c7:03:d9:
                    b1:5f:f7:18:62:e0:09:2b:3c:5d:19:73:21:0f:9e:
                    3b:68:9c:52:8a:b8:10:63:e7:68:3e:83:c3:8a:c8:
                    02:91:03:cf:64:d7:7e:5d:6e:b9:8f:39:4b:af:99:
                    31:39:30:06:24:77:7f:41:5b:0b:79:98:ce:80:93:
                    b7:99:72:c8:b6:fe:3a:eb:c2:9e:d8:61:b2:bf:54:
                    a3:47:eb:6d:ea:df:8b:2b:95:5c:a5:24:d2:08:28:
                    a2:21:ae:30:e3:13:0b:f2:1c:a0:70:3f:ce:b1:6f:
                    39:ca:ec:e2:12:e7:b4:d2:93:3c:90:00:53:f3:8a:
                    d2:83:f4:1d:f3:b8:f8:31:00:9a:ae:b3:b0:5e:95:
                    70:4b:ce:c9:67:d8:ba:0a:6a:46:8b:1b:11:ae:ad:
                    da:83:99:eb:0c:95:35:d1:21:f3:09:6c:3a:ff:62:
                    1f:e6:3f:26:1d:69:ad:74:99:5d:01:a2:8a:29:53:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:DB:45:A8:23:60:B4:EF:6B:BB:24:69:87:D8:9C:AB:93:3C:1F
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/80DB21D6A87411F18EA41AF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:71:28:70:41:85:f5:32:8b:98:d1:e4:c5:17:da:a9:f4:
         79:7f:50:a3:26:32:aa:b3:41:54:10:46:83:e4:49:14:89:24:
         73:ef:6b:ac:5d:fe:26:6b:d1:9c:62:fc:d2:7e:f5:fb:d7:ef:
         cd:65:0a:12:e1:58:39:a4:77:4c:47:75:70:76:7e:27:7d:10:
         15:b6:e9:6a:a6:df:7f:8c:dd:22:2e:26:ec:f9:35:47:2e:f8:
         0c:8f:1b:c1:e4:c6:ae:98:f4:25:d2:14:de:24:10:ef:a6:8e:
         a7:b0:df:15:ab:2b:0f:62:16:cf:8c:3c:95:e7:9d:63:37:fe:
         1d:d8:c9:3e:52:1a:b0:33:5b:6f:ab:89:30:bc:04:61:ae:e5:
         49:3a:4c:95:46:64:9d:e9:a4:55:ef:59:35:26:18:82:f0:36:
         bf:b3:90:bf:fb:ec:cf:32:7d:9c:80:10:84:c3:96:b1:52:1b:
         69:e4:3c:c0:d1:c2:d0:ae:94:36:92:2c:59:47:4f:7e:02:7d:
         24:b7:fd:77:0d:b7:92:18:f0:10:c5:00:28:02:09:d7:37:5c:
         e2:ba:07:6d:e1:d8:8d:e9:3f:ab:94:c2:2b:8e:11:1f:27:2e:
         39:80:f0:70:50:36:35:4d:cf:e2:8f:49:96:1b:45:cc:81:37:
         fe:b7:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----